3 ms·

What virus can be implemented in that?

• jonsneyers 5y ago
  The only 'virus' you could implement would be just a weird-looking image.
  • slver 5y ago
    Imagine I use a timing attack to visually encode some information about you in an image and trick you into sending a screenshot somewhere. Very quick take, but systems are very interconnected these days, so sandboxes tend to leak in very unintentional ways.
    • jonsneyers 5y ago
      Yes, that is true, but it isn't particularly related to JPEG XL specifically.
    • KMag 5y ago
      How do you read a timer from within the JPEG XL bitstream? I believe the decoding process is deterministic.
      • slver 5y ago
        It's a challenge, but I'd probably look into any decoders that parallelize the decoding and see if I can abuse this.
        • tsegratis 5y ago
          Just wait, its only a short while til JPEG contains the pdf spec and a javascript interpreter
        • wizzwizz4 5y ago
          You'd need to exploit an implementation bug, or have the user be streaming or something (so some squares appear before others as the output of your timing attack).